SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Scalable Capital, a leading European fintech platform with over 1 million clients and €50 billion in assets under management, is expanding its Security Operations Center (SOC) team. This Senior Security Incident Response Analyst role is designed for a technical expert who leads advanced investigation and threat intelligence workflows.
You will drive the end-to-end lifecycle of security incidents from initial detection through containment and recovery. Key responsibilities include performing deep-dive host and network forensics to identify root causes and persistence mechanisms, designing and refining automated SOAR playbooks to increase response speed and consistency, and executing hypothesis-driven threat hunts across environments. You will also drive the threat intelligence process by analyzing emerging trends and integrating external feeds into detection logic.
As a technical leader, you will act as an escalation point for complex alerts, mentor junior analysts on advanced investigative techniques, and generate detailed incident reports for both technical teams and executive stakeholders. You will translate complex technical findings into clear communications for non-technical audiences.
The company offers an international, diverse team environment with the latest hardware and tools. Benefits include flexible work arrangements with opportunity to work from abroad, international relocation support, in-house knowledge sharing and career development sessions with an individual education budget, free German language classes, 50% monthly contribution toward Deutschland Jobticket, complimentary Scalable Capital PRIME+ Broker subscription, and flexible discounted sports activities through Urban Sports Club. The company also provides an attractive compensation package and company pension scheme.
Scalable Capital was founded in 2014 and now employs over 700 people across Munich, Berlin, Vienna, Milan, and London, offering digital investment and banking services including a broker platform, digital wealth management, and a European investor exchange.
Requirements:
- Extensive hands-on SOC or incident response experience, including Tier 2/Tier 3 responsibilities
- Proficiency with SIEM/SOAR platforms, EDR tools, and forensic toolsets
- Hands-on experience with AWS security controls and container security
- Strong understanding of network protocols, endpoint security, and common attack vectors
- Ability to use Python or similar scripting languages for security automation and data analysis
- Relevant certifications such as GCIH, GCFA, CISSP, or equivalent (preferred)
- Excellent analytical mindset, attention to detail, and ability to thrive under pressure
- Strong communication skills capable of translating technical findings to non-technical audiences
